termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

CVE-2019-25766

A flaw was found in Renovate. During certain Go Modules update failure scenarios, temporary repository tokens are inadvertently leaked into pull request comments. A remote attacker able to view these comments could obtain the exposed tokens, leading to unauthorized access to repositories. This...

CVE-2019-25766

Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...

CVE-2019-25766 Renovate before 19.38.7 Credential Exposure via Go Modules

Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...

EUVD-2019-20202

Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...

GHSA-XPHW-4F88-5F39 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, crossplane-provider-aws-s3control, cert-exporter-fips, addon-resizer, lvm-driver-fips, backup-restore-operator, gcp-compute-persistent-disk-csi-driver, tekton-chains-fips, helm-operator, ipfs-cluster-fips, openbao,...

GO-2024-2937 vulnerabilities

Vulnerabilities for packages: chainctl, gotenberg, ollama, hugo, hugo-extended...

GO-2024-2453 vulnerabilities

Vulnerabilities for packages: slsa-verifier, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, scorecard, crossplane-provider-aws-cloudfront, skaffold, apko, spire-server, crossplane-provider-aws-lambda, pulumi, boring-registry, gitness, grype,...

GO-2026-4867 vulnerabilities

Vulnerabilities for packages: argo-rollouts, coredns, tkn, cni-plugins, gitaly, kube-arangodb, datadog-agent, nri-consul, git-credential-oauth, nri-mssql, nats-top, container-object-storage-interface, net-kourier, kubeflow-katib, rancher-agent, tigera-operator, verticadb-operator,...

GO-2026-4526 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, crossplane-provider-aws-elasticache, crossplane-provider-aws-kinesis, crossplane-provider-azure-storage, crossplane-provider-aws-iam, tempo, datadog-agent, crossplane-provider-aws-s3, crossplane-provider-aws-kms, aws-otel-collector,...

GO-2024-2887 vulnerabilities

Vulnerabilities for packages: tflint, nsc, supercronic, trivy, ollama, kubernetes-dashboard-metrics-scraper, spicedb, metrics-server, nri-f5, php-fpmexporter, rook, prometheus-alertmanager, spire-server, yq, cosign, falcosidekick, grafana-agent-operator, dask-gateway, nri-elasticsearch, dockerize...

UBUNTU-CVE-2026-56864

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...

EUVD-2026-58514

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...

JetBrains GoLand < 2026.2 Multiple Vulnerabilities

The version of JetBrains GoLand installed on the remote host is prior to 2026.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration CVE-2026-64802 - In...

CVE-2026-64802

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...

CVE-2026-64802

Technical details about CVE-2026-64802 are not publicly provided in the supplied documents. Monitor for updates from JetBrains and NVD; no specifics on affected versions, vectors, or fixes are available here.

EUVD-2026-48227

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...

CVE-2026-64802

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration...

PT-2026-63956

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.2 Description Arbitrary code execution is possible within the Go Modules integration before the user grants project trust. Recommendations Update JetBrains GoLand to version 2026.2...

GO-2026-5953 Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check in github.com/casdoor/casdoor

Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check in github.com/casdoor/casdoor. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...